`Proxy: System Certificates` will block VsCode extension msal login

[xiaolang124]

Does this issue occur when all extensions are disabled?: Yes/No
This will block extension to use network.

• VS Code Version: Probably the latest
• OS Version: Win

Steps to Reproduce:

1. Check Proxy: System Certificates.
2. Using VsCode Teamsfx extension to login M365, will encounter Error - A non-MSALJS error was thrown while attempting to get the cloud instance discovery metadata. Error: Error Error Description: Error: certificate has expired problem.
3. Uncheck Proxy: System Certificates will solve the issue.

Related issue:
OfficeDev/microsoft-365-agents-toolkit#7995
microsoft/azuredatastudio#22227

[chrmarti]

There must be an expired root certificate in your certificate store. Please remove that.

The fact that it works when disabling the setting indicates that there is a valid certificate in NodeJS' built-in certificates. We could try to parse the certificates from the OS and skip those that have already expired.

[ncapito]

@chrmarti i'm experiencing a similar issue in ADS. I've checked and there are no expired root certificates for Microsoft.

.

Please let me know if i'm misunderstanding what you are asking i can check whatever you would like.

[chrmarti]

Continuing in #284800